Last updated: October 3, 2026
Carreh respects and protects the privacy of its users. This Privacy Policy explains how personal information is collected, used, stored, and protected when clients interact with the Carreh website and services. By using Carreh services, you agree to the practices described in this policy.
Full name, date of birth, gender, nationality, and passport details.
Email address, phone number, and residential address.
Travel dates, destinations, travel history, and travel documentation details.
Payment details and billing information. Payment transactions are processed securely through third-party payment providers (Stripe). Carreh does not store credit card numbers.
Personal information is used to:
Information may be shared with:
Carreh does not sell personal data to third parties.
Carreh implements technical and organizational measures to protect personal information from unauthorized access, alteration, or disclosure. Data is encrypted in transit and at rest using industry-standard protocols.
Some features in the Carreh and Flight Board apps use your phone's location, only if you allow it, to do what you asked: for example, Flight Board's Leave By works out how long the trip to the airport takes, and Carreh suggests what is nearby. For a route, the location is sent to Apple Maps to calculate it. You can turn location access off at any time in your phone's settings; the rest of the app keeps working.
When you create an account, sign in, join a waiting list or contact us, we record your IP address and the approximate location it indicates (city and country), your browser and device type, your language and time zone, the page that brought you to us, and the time of the action. We use this to keep accounts secure, to prevent fraud and abuse such as automated sign-ups, and to understand how people find us. We do this on the basis of our legitimate interest in keeping Carreh safe (Article 6(1)(f) GDPR), and we keep it for 36 months unless a security investigation or the law requires longer.
In the Carreh and Flight Board apps we also record, for the same purpose: an identifier for the app's installation on your device, your device model, its operating system and the app version, whether you are on Wi-Fi or mobile data, whether notifications are allowed, and whether the device appears to be jailbroken or rooted. For each sign-in and other account event we also note the internet provider of the connection and whether it comes through a VPN, Tor or a data centre. This lets us recognise your devices, warn you about a sign-in from a new device or country, and stop account takeover and fraud. This security data never includes your contacts, your precise location, your advertising identifier or information about your other apps.
If you join a waiting list, such as the Carreh Mail waiting list, we keep your name and email address with the details above, to tell you when the product opens. You can leave at any time by writing to support@carreh.com.
Under the General Data Protection Regulation, users have the right to:
Requests may be made via support@carreh.com.
Personal data is retained for as long as necessary to provide the service and to comply with our legal obligations. Most account data is deleted when you close your account or ask us to remove it. Identity and travel-document records collected for anti-money-laundering and sanctions checks are an exception: we are required to keep these for 8 years from the date they were submitted, and a deletion request cannot shorten that period. You may ask us to delete your data at any time, and we will delete everything we are not legally required to retain.